GitHub vs Sonatype Repository Firewall comparison

Cancel
You must select at least 2 products to compare!
GitHub Logo
2,116 views|910 comparisons
100% willing to recommend
Sonatype Logo
826 views|405 comparisons
100% willing to recommend
Comparison Buyer's Guide
Executive Summary

We performed a comparison between GitHub and Sonatype Repository Firewall based on real PeerSpot user reviews.

Find out in this report how the two Application Security Tools solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed GitHub vs. Sonatype Repository Firewall Report (Updated: March 2024).
768,578 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"The deployment is fast since we just have to run the script, and once it's done, it takes a few minutes.""The initial setup was easy.""The solution is scalable.""The most valuable feature is the fact that it's cloud-based, and we don't have to manage an on-premises server to use it.""We can make a private repository.""This solution is just easy to use.""The solution has been stable for us.""All the features are valuable, but the most important feature is that GitHub has advanced security. The second important feature is the capability to create custom GitHub actions and the capability to deploy in different types of architectural infrastructures, such as hybrid, private, or public."

More GitHub Pros →

"The product's network and intrusion protection features are valuable. It also has rules and compliance features for security.""Another thing that I like about Sonatype is that if you download something today, and five days from today it becomes vulnerable, it will notify you."

More Sonatype Repository Firewall Pros →

Cons
"GitHub could add some more security features.""Our firewall was blocking cloning and downloading with SSH.""This solution could be improved by offering crowd sourced support where we could ask questions to other users.""The security point should be addressed in the next release and scaling is also an issue.""GitHub should provide more integration in their next release, including integrating with Jenkins, CI/CD and Jira.""The user interface on GitLab is better.""There could be more integration into Azure.""Could be more user friendly."

More GitHub Cons →

"What I don't like is the lack of an option to pick up the phone and call someone for support. That is something they need to improve on. They need to have a professional services package, or they need to include that option with their services.""The tool needs to improve its file systems. The product should also include zero test feature."

More Sonatype Repository Firewall Cons →

Pricing and Cost Advice
  • "The private repositories are free, which is very good."
  • "It is open-source. There is no license for GitHub."
  • "The price of this solution is reasonable."
  • "If there are only 10 people using a particular repository, then GitHub is free. But if we increase the number of users, we need to pay the normal charge for GitHub."
  • "We have an enterprise licensing agreement, and I am not part of the finance department so I can't say how much it costs."
  • "I haven't had to pay anything for GitHub, I use the free version."
  • "The licensing model for GitHub is user-based. Whenever the new developer joins we have to get a new license and register their ID. The overall price of the solution is reasonable."
  • "The licensing model from GitHub is very clear."
  • More GitHub Pricing and Cost Advice →

  • "The pricing is reasonable if you're a large enterprise developing code. It's not super-expensive."
  • More Sonatype Repository Firewall Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
    768,578 professionals have used our research since 2012.
    Questions from the Community
    Top Answer: The control is the most valuable feature as developers can work on a single code.
    Top Answer:You don't have to pay for a license if you are using the free version. It gives you all the possible features it has.
    Top Answer:The initial setup requires heavy documentation which can be challenging for new developers.
    Top Answer:The product's network and intrusion protection features are valuable. It also has rules and compliance features for security.
    Top Answer:The licensing is quite reasonable, I believe. I do see that it adds value. It means whatever part you want to use, you can just use that part and pay for that. I think the licensing is fair enough… more »
    Top Answer:The product helps with vulnerability and security assessment. It also helps with assessment at the configuration level.
    Ranking
    Views
    2,116
    Comparisons
    910
    Reviews
    51
    Average Words per Review
    330
    Rating
    8.6
    Views
    826
    Comparisons
    405
    Reviews
    2
    Average Words per Review
    531
    Rating
    8.5
    Comparisons
    Also Known As
    Sonatype Nexus Firewall, Nexus Firewall
    Learn More
    Overview
    GitHub is a web-based Git repository hosting service. It offers all of the distributed revision control and source code management (SCM) functionality of Git as well as adding its own features. Unlike Git, which is strictly a command-line tool, GitHub provides a Web-based graphical interface and desktop as well as mobile integration. It also provides access control and several collaboration features such as bug tracking, feature requests, task management, and wikis for every project.

    Sonatype Repository Firewall is a cloud-based security solution designed to safeguard your software supply chain against malicious components. It operates by meticulously scanning and evaluating each new component against customized governance policies, thereby effectively identifying and blocking potential threats before they infiltrate your development pipeline. What sets Sonatype Repository Firewall apart is its user-friendly setup, seamless integration with existing workflows, and remarkable scalability, making it suitable for software development environments of any size. Key features include blocking malicious components through behavioral analysis, malware scanning, and vulnerability assessment, as well as the ability to enforce custom governance policies. By utilizing this tool, organizations can enhance their software supply chain security, mitigate risks related to supply chain attacks, bolster compliance with industry standards, and ultimately reduce costs associated with security incidents. 

    Sample Customers
    Dominion Enterprises, NASA, Braintree, SAP, CyberAgent
    EDF, Tomitribe, Crosskey, Blackboard, Travel audience
    Top Industries
    REVIEWERS
    Computer Software Company22%
    Financial Services Firm14%
    Government11%
    Manufacturing Company8%
    VISITORS READING REVIEWS
    Computer Software Company13%
    Manufacturing Company11%
    Financial Services Firm11%
    Government7%
    VISITORS READING REVIEWS
    Financial Services Firm33%
    Government8%
    Computer Software Company6%
    Insurance Company5%
    Company Size
    REVIEWERS
    Small Business38%
    Midsize Enterprise9%
    Large Enterprise53%
    VISITORS READING REVIEWS
    Small Business21%
    Midsize Enterprise13%
    Large Enterprise67%
    VISITORS READING REVIEWS
    Small Business14%
    Midsize Enterprise11%
    Large Enterprise75%
    Buyer's Guide
    GitHub vs. Sonatype Repository Firewall
    March 2024
    Find out what your peers are saying about GitHub vs. Sonatype Repository Firewall and other solutions. Updated: March 2024.
    768,578 professionals have used our research since 2012.

    GitHub is ranked 10th in Application Security Tools with 64 reviews while Sonatype Repository Firewall is ranked 31st in Application Security Tools with 3 reviews. GitHub is rated 8.6, while Sonatype Repository Firewall is rated 8.4. The top reviewer of GitHub writes "Beneficial version control and continuous integration, but guides would be helpful". On the other hand, the top reviewer of Sonatype Repository Firewall writes "You will get clean code every time, and that's a great achievement". GitHub is most compared with Snyk, AWS CodeCommit, Atlassian SourceTree, Bitbucket and Surround SCM, whereas Sonatype Repository Firewall is most compared with JFrog Xray, Cisco Secure Firewall, Black Duck, Snyk and Veracode. See our GitHub vs. Sonatype Repository Firewall report.

    See our list of best Application Security Tools vendors.

    We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.